Command Injection Vulnerability in NETGEAR Routers and WiFi Systems
CVE-2020-35798

9.3CRITICAL

Key Information:

Vendor

Netgear
Status
R6400v2 Firmware
Vendor
CVE Published:
30 December 2020

What is CVE-2020-35798?

NETGEAR devices are susceptible to command injection attacks, allowing unauthenticated attackers to execute arbitrary commands on the affected systems. This vulnerability encompasses a range of router models operating on firmware versions prior to specified updates. Users are advised to update to the latest firmware to mitigate the risks associated with this security flaw. For further information, please refer to NETGEAR's security advisory.

References

https://kb.netgear.com/000062715/Security-Advisory-for-Pr...
x_refsource_MISC

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.